International cooperation busts cyber-crime ring

In a pair of related cases, a total of 38 people with links to global organized crime—mostly working out of Romania and the U.S., but also operating in Pakistan, Portugal, and Canada—were indicted for engineering a decidedly 21st century cyber-based scheme. (From the FBI Website.)

By using the fairly routine online crime of “phishing“, the online scam also used a clever offline payoff, and ultimately swindling thousands of people and hundreds of financial institutions out of millions before being shut down.

Phraudsters working primarily out of Romania—known as the “suppliers”—went phishing and obtained thousands of credit and debit card accounts and related personal information by sending out masses of spam. 

These suppliers then sent their ill-gotten financial data to their partners in the U.S.—so-called “cashiers”—through Internet chat and e-mail messages.

By using some sophisticated but readily available software and technologies, the cashiers manufactured their own credit, debit, and gift cards encoded with the stolen information, giving them unfettered access to large amounts of money via ATMs and point-of-sale terminals. 

Before these cards were used, cashiers directed “runners” to test the cards by checking balances or withdrawing small amounts of money from ATMs. Then, these “cashable” cards were used on the most lucrative accounts. 

The cashiers wired a percentage of the illegal proceeds back to the suppliers. (More details of the method used, the people charged, the charges and possible sentences, can be read here.)

Folks– were you one of the “thousands” who responded? One phish message was made to appear as if it originated from Connecticut-based People’s Bank.  (In fact, the e-mail message directed victims to a computer in Minnesota that had been “hacked,” and used to host a counterfeit People’s Bank Internet site. {called “pharming“})  During the course of the investigation, it was determined that the individuals had engaged in similar phishing schemes against many other financial institutions and companies, including Citibank, Capital One, JPMorgan Chase & Co., Comerica Bank, Wells Fargo & Co., eBay and PayPal.

Tip of the day: I don’t care how “authentic” the e-mail, IM, or text message looks; don’t click the link!

Today’s free link: This video quick tip on CNet TV shows you how to move your complete (including playlists and metadata) iTunes library to a new computer.

Copyright 2007-8 © Tech Paul. All rights reserved. post to jaanix 

Share this post :

Mrs. Kitty Anderson

Folks, there will not be an article today on Tech–for Everyone.. and it is quite possible that I may never write another article ever again. I may just retire.

Now before you go getting all ‘het up’, and cross with me, I want you to ask yourself if maybe you wouldn’t retire too.. if you were me. Understand, I’m rich now. See? This e-mail from Mrs. Anderson proves it:

BRITISH NATIONAL LOTTERY LONDON, UK.
PRICE AWARD DEPARTMENT.
Ref: UK/0274K82/10
Batch: 172/104/ZY370
We the Board and Management of the British National Lottery happily announce to you the draw (#251) of the British National Lottery.. claim a total sum of £1,000,000 (ONE
MILLION POUNDS) in cash credited…

I am not exactly sure how much real money a million “pounds” works out to be.. but I’m thinking it is a pretty good sum, and I’m hoping it is enough to buy myself a tropical island somewhere in the Pacific.. Because I think that would be pretty neat. Me. Palm trees. Sandy beaches. Sunshine.

I have sent my vital information, and winning reference number to Mr.Hillary Martins (The Foreign Service Manager) as the e-mail instructed me to do.. and now I am simply waiting for them to deposit the money into my account.
Once that happens, I’m pretty sure I’ll be out of here.. because that’s gotta be a lot of money.

In fact, I think it’s enough money that I’m willing to overlook the “PRICE AWARD”. (I know they meant “prize”. They’re probably just as excited and happy as I am..) I’ve never been a millionaire before.. this is so cool!

Today’s free link: http://www.scambusters.org/

*** Folks– I try to keep it lighthearted on Fridays, but for those of you who are security-minded I offer you this link as well: China’s cyber-militia behind U.S. blackouts?

Copyright 2007-8 © Tech Paul. All rights reserved. post to jaanix

Share this post :

Apple releases 41 patches for Leopard, Flash

Keeping your software patched and up-to-date is a vital part of safe(r) computing these days. I cannot recommend enthusiastically enough that you enable “automatic” updating wherever and whenever it is offered.
A “patch” (aka “update”) closes ‘holes’ (aka “vulnerabilities”) that hackers are “exploiting” to take control of, or plant malware on, (your) machines.

There is an active exploit out there for the Flash player (Those animations on Webpages) that affects anyone who has not disabled Flash– whether you’re running Windows, Mac, or Linux.
If you like having Flash animations, you should visit this page on the Adobe Website which will analyze your version of Flash Player to see if you need to update.

Mac users should visit Apple Update and get these important updates.

Today’s free link: A repeat today, because you really should know about this free tool: the Secunia Software Inspector will scan your machine’s installed programs and determine if they’re out-of-date, or there’s patches missing– and it will help you resolve the problems it finds.

Copyright 2007-8 © Tech Paul. All rights reserved. post to jaanix

Share this post :

Skype says I’m infected with malware…

Yesterday a “chat” window (Skype) opened on my machine, and presented me with a dire warning from someone named “Software Update”. It said that “WINDOWS REQUIRES IMMEDIATE ATTENTION” and, it provided me with a solution.

(Click on image to see large version)

Please, folks, tell me you have spotted this for what it is.

Please tell me that you knew –instantly– that this is a cybercrime attempt.. that it is Phraud-ulent.

Please tell me that you know what will happen if the link provided in this message is clicked; and, please, please, please tell me you would never click the link.

Just in case you aren’t sure…
* “Software Update” doesn’t exist.
* “www.onlinemonitor.info” is not registered in ARIN (the registry of Internet addresses)
* clicking the link will allow scripts to run and/or take you to a poisoned Website which will install malware on your machine.. or/and, it may take you to a site that will sell you a rogue antispyware program (please read my article, Is that antispyware program really spyware).. all of this so that the hacker can take control of your machine.
* Microsoft DOES NOT alert you via Instant Messaging. No legitimate company does.

This is a classic example of a hacker’s attempt to get you to click their link. Please point your less-savvy friends and family to this article and educate them to the dangers of spam (unsolicited) messages and tell them–
NEVER CLICK THE LINK.

[addenda: Peter Parkes (Skype Blogger) wrote and asked me to remind my readers to, quote, "Please report users who send these messages to abuse@skype.net - that will help us to block them where appropriate."]

Today’s free link(s): I have assembled on my Website a collection of links to the best free anti-malware programs to help you prevent infection.. and clean up if you’ve been infected. To see them, click here. Also, Bill Mullins has posted a very complete tutorial, Think You Have A Virus?– Some Solutions, which is quite probably the best one-stop lesson on malware I have ever run across. (I also recommend his How Fake/Rogue Software Affects Real People.)

Copyright 2007-8 Tech Paul. All rights reserved. post to jaanix

Share this post :

When bigger was better

I love to read. I love books, and magazines, and libraries. I like reading so much, that I have even purchased books; though I much prefer to get them free. I am always on the look-out for books at yard sales, Church sales, and the library’s Free Bin. I have discovered writers, and read about esoteric topics I never would have, simply because they were in a box of paperbacks I picked up for a dollar.
This has been true for as longs as I can remember.

Needless to say, the books you pick up for free at such places as I mentioned are somewhat.. well, out of date and often are really old. (The book I‘m about to mention is older than I am, if you can imagine that!)

In my latest bag of free books I discovered a book from 1961 titled, SAC, Men and Machines of Our Strategic Air Command. (This was published well before Dr. Strangelove* made the scene.) This book provided a tour of the branch of the Air Force often thought of as the “doomsday boys”– the ICBM and B-52 crews of the Cold War policy of MAD.

The reason I mention it here is because of this picture of the “computerized nerve-center” of SAC Headquarters– titled “IBM Underground Computers” (Click on image to see larger version.)

“Still further underground the electronic computers of SAC hum continually as all new information of interest is fed into the giant machines. Here all information pertaining to SAC, such as status of aircraft, missiles, crews, bases, war plans and supplies, are stored for instant readiness right up to the minute. In case of war these computers would record progress of strike force, so that all data is instantly available for use in strategy maneuvers. From a trajectory center, intelligence specialists will, with the aid of such computers, mathematically compute trajectory and space data for use in aiming SAC missiles from its many bases.”

This picture fascinates me. Here you see the machines that have evolved into your PC’s today (In fact, your laptop is more capable than this whole room was).
Of particular note:
* The reel-to-reel things in the back, nearly as tall as a man, are what we call a “hard-drive” today.. and I doubt that all of them (I count 7) added together equals a Gigabyte.
* In the foreground is a printer– as big as a wetbar, and capable of printing 60 words a-minute.
* Where’s the monitor?

This was the best money could buy back then, and I would estimate you’re looking at several million dollars’ worth of equipment. State of the art– 1961.

As the saying goes, we’ve come a long way, baby!

* A Tech Paul’s Top 100 Movies list member.

Today’s free link: Looking for a great way to view and manage your RSS feeds from your desktop? Look no further than FeedDemon, the most popular Windows RSS reader.

Copyright 2007-8 © Tech Paul. All rights reserved. post to jaanix

Share this post :

 

Holiday Edition– IE questions & Security "Zones"

My recent article on tweaking IE 7 and using Security Zones has prompted several reader questions whose answers are worth posting here. So today there will not be my usual Tip of the day, but instead there will be several Q’s and their A’s. If for some reason you missed the original article and would like to get up to speed, click here.

Q. Can’t add a site to Trusted Zone, Why are my options “greyed out”?
A. The person who sent me this question did not specify if they were experiencing this at home, or at work, which can have different causes. If you are on your personal machine at home, the most likely cause for having any Settings or Options choices grayed out (unavailable) is that you are running in User mode. You need to be running as an Administrator to make changes to Windows’ behavior. Log out of your current session by clicking on Start >Log Off and switch to a user account with administrator privilege. Now your menu choices will not be grayed out and you can make your changes. When you’re finished, log off and return to your normal user account.
If you’re at work and using the company’s machine, it is likely that there are policies in place that prevent employees from making these kinds of changes. If you have a legitimate change (that will “help improve your productivity”) that you’d like to have made, submit a request to your IT department.
**Also, some types of malware will modify your Trusted Sites zone (adding poisoned, or junk sites such as a bogus lottery) and then change a setting in your Registry which blocks — greys outs — your ability to go in and remove them. Use anti-spyware programs to scan your machine and remove the infection. In this case, I would start with the Microsoft Malicious Software Removal Tool, and then click here for my list of free, safe, and effective antispyware apps.

Q. How do I remove a site from a Zone?
 A. You can remove a site from any Zone by navigating to the Security tab of Internet Options as shown in the prior article, click on the zone you want to edit, and then click on the site you want to remove, as shown below.

Now click on the “Remove” button.
Actually, the fella who sent me this question was referring specifically to the Restricted Sites zone. He either really doesn’t trust Microsoft, or is trying purposely to load his machine with malware…either way, I would think twice before removing sites from the Restricted Sites zone!

Q. What should I do with these security warnings?
A. IE displays several types of warnings — suspected phishing, ActiveX, prevented download, open site in your Trusted Zone, et al — and so the answer depends on which warning you are getting…and what you’re doing when you get them.
If you are being warned that the site you’re looking at is a “suspected” Phishing site, then by all means do NOT enter any personal information! As these sites often also try to install trojan horses and malware downloaders, close down your browser and run a full antispyware sweep. Not all “suspected” sites are truly Phishing sites, sometimes mistakes happen, but in this day and age, it’s better to err on the side of caution.
ActiveX is a tool (a bit like Java) that usually is used for good purposes, more often than not actually (Microsoft Update uses ActiveX, and that’s something you definately want enabled), but in keeping with the thought expressed immediately above, you should decide on a case-by-case basis. If you can see and do everything you want to on a site without installing the ActiveX control, why install it?
Preventing unwanted downloads is a very good thing, so I strongly advise you: do not turn this warning feature off. Just click on the yellow bar and select “download this software” when you are downloading code. In fact, I believe this advice can be applied to all of IE’s warnings. We are living in a world where the Internet is relatively unpoliced, and so while it is irritating, it is safer (and wiser) to live with these warnings that to have our identity stolen and used to commit crimes, or have our PCs turned into a spambot.

Today’s free link: if you suspect a site is fraudulent and/or being used to “phish” for your personal information, and IE hasn’t flagged it as such — but you’re suspicious anyway – download McAfee’s free Site Advisor. This IE “plug in” will give you a valuable ’second opinion’…and is updated more often than IE is.

Copyright 2007-8 © Tech Paul. All rights reserved. post to jaanix

Share this post :

The WorldWide Telescope: An amazing app

Yesterday I attended an event at Microsoft’s Silicon Valley Research Center and learned  about the technologies of the future.

Well, sort of. What I saw was an overview of what Microsoft is doing in the area of R&D– research and development.
Microsoft is planning on sticking around for a while, and they understand that technology is innovation… not a stagnant build-it-once-sell-it-a-million-times type thing, like a paperclip.

This from their Website: “Microsoft Research is dedicated to conducting both basic and applied research in computer science and software engineering. Its goals are to enhance the user experience on computing devices, reduce the cost of writing and maintaining software, and invent novel computing technologies.”

It was an interesting and informative event, and I want to take a minute and thank those folks involved.

* The keynote technology displayed was a program that is available now, and it is pretty amazing — especially when one considers the amount of data that must be accessed — it’s a virtual picture of the universe. And the best part is, you can explore it.
Yes, you can fly to Mars… or Rigel.. or the crab nebula.. or the top of Mt. Rainier here on earth (Virtual Earth is one data source).

“A state-of-the-art combination of software and Web 2.0 services, WorldWide Telescope offers terabytes of high-resolution images, astronomical data, and guided tours that bring the universe to your fingertips.” (again, from Website.)

This isn’t just pictures folks, when you right-click on Mars (for example) and select Properties, you will be offered practically every known fact about Mars. This is an unparalleled learning tool!

The engine behind this is kind of hard to explain; maybe.. real-time, super-advanced PowerPoint? Infinite MSN Maps?
But I don’t have to try to explain it. You can see it for yourself, and I highly suggest you do. Simply stunning.

To read more about the project, click here.
To download it for yourself, click here.

 I found this clip which was a “sneak peak” presented by Roy Gould and Microsoft’s Curtis Wong. It will give you some idea…

Copyright 2007-8 © Tech Paul. All rights reserved. post to jaanix

Share this post :

Make Outlook open when Windows starts

Do you have a favorite program that you’d like to start as soon as Windows does — perhaps your email client? I have told you in previous articles about stopping programs from loading at boot, and today I’ll tell you how to reverse the process, and gain further control your computer’s behavior.

Tip of the day: It seems a lot of you have been interested in how to remove unwanted programs from your Startup Folder, and if you’ve done so, you already know how to navigate to and open it. For today’s tip I’m going to use as an example adding Outlook Express, so that it will automatically open for you when you turn on your machine and start your day (simply substitute the program you use). Because if you’re like me, one of the first things you do is check your email…and you like to save steps and time. I will also show you a different way of navigating to the folder.

In the previous articles I told you that when you deleted programs from your Startup Folder you we not deleting the programs — merely shortcuts to the program. Today we’re going to add a shortcut.
In Windows XP, start by opening My Computer, either by Start >My Computer, or double-clicking the My Computer icon on your desktop. Now double-click the Local Drive (C:) icon, [you may get a window saying "these files and folders are hidden". Just click on the "view these now" link.] and then locate and double-click the Documents and Settings folder.

If you wanted to make a change for all the users of your machine you would open the All Users folder. Since we are customizing the start-up behavior just for ourselves, we open the folder that matches our User Name — in this machine’s case, the folder named “Terry” (sharp-eyed, security-conscious types will notice that the Administrator account hasn’t been renamed on this machine — a “no no”.). Now we look for and open the Start Menu Folder. Open it and then open the Program folder, and finally, Startup.

As you can see, this User Account has no programs at all listed in its Startup folder. That doesn’t mean that no programs launch at boot. The programs I do want, (antivirus, firewall, etc.) I want to have run no matter who is using the machine, so they’re listed in the “All User’s” Startup folder.

In Vista, it is a little different: the Startup folder is listed in Programs, accessed from the Start button. Click Start >Programs and scroll down until you see the folder labeled Startup. Double-click it to open its contents window and drag your shortcuts into there.

Adding a program shortcut is easy, and it’s easiest if there is already an icon on the desktop (which is also a shortcut, btw). Simply right-click on the icon and drag it into the open Startup window, and let go. A menu will open: select “Create shortcut here”. And that’s it. You’re done.
If there isn’t a desktop icon, hover your mouse over the Start button, and then Programs. Now the list of all your programs appears. Again, simply right-click and drag the ones you want, as outlined immediately above. Now the next time you boot Windows, those programs will open for you automatically. A neat little trick.

Today’s free link: Trillion. For those of us who use Instant Messaging. This tool lets you combine your various IMs into a single “control panel”. From Website: “Trillian™ is a fully featured, stand-alone, skinnable chat client that supports AIM, ICQ, MSN, Yahoo Messenger, and IRC. It provides capabilities not possible with original network clients, while supporting standard features such as audio chat, file transfers, group chats, chat rooms, buddy icons, multiple simultaneous connections to the same network, server-side contact importing, typing notification, direct connection (AIM), proxy support, encrypted messaging (AIM/ICQ), SMS support, and privacy settings.”

Copyright 2007-8 © Tech Paul. All rights reserved. post to jaanix

Share this post :

The print job won’t stop printing

Sometimes we tell our machines to do something (let’s, for the sake of example choose, oh, say, print a 10-page document) and then, being human and somewhat fickle, we change our minds.

Perhaps we notice that we selected the wrong document; or, we have a sudden “inspiration” and there’s now a whole new thought we want to insert into it.. or we notice a major typo that we need to fix. Whatever it is, we want the printer to stop printing NOW.

Now what I am going to say next might comes as a surprise and a shock to some of you folks– but, sometimes in life you just have to grab that band-aid by the corner and rip that sucker off.
Here’s the thing, and I ain’t gonna sugarcoat it– computers are dumb machines. (Maybe, instead of “dumb”, I should say “obedient”..)

Computers follow rigid logic to obey the “commands” you “input”, and they really don’t “multitask” very well. They ‘think’ and act sequentially.. and don’t move on to the next input/command until they have completed the first one.
What this means is: they won’t even see the command to stop printing the 10-page document until they have “processed” the Print command you gave earlier.
(The paper and ink that gets wasted this way is truly your fault, and not the computer’s. You told it to Print, and it merely obeys!)

When you hit the power button on the printer (or yank the power cord out of the wall) you haven’t really stopped the Print job. Oh, no. You have only interrupted it. When you turn it back on, or reconnect the USB cord– your machine is going to everything in its power to complete its assigned task.. and it starts printing the 10-pager from right where it left off.

The correct way to stop the print job (you commanded) is to erase it from your PC’s memory. Remember I told you computers were dumb? Well, they can be forgetful too.

1) Go to Printers in your Control Panel (In XP: Start> Settings> Printers and Faxes. In Vista: Start> Control Panel> Hardware and Sounds> Printers.)
2) Double-click on the printer that is still trying to print the 10-page document.

The window that opens will show all the print jobs scheduled to be sent to the printer for completion, and the 10-page document should appear here.

3) Click on “Printer” from the menu bar, and click “Cancel All Documents”. (Answer “Yes” if you’re asked, “are you sure?”)

That’s it. Your computer has now “forgotten” your command to print, and when you turn your printer on again, it will not start printing something you no longer want.

Today’s free link: Taskbar Shuffle Drag and drop your taskbar buttons and system tray icons to instantly reorder them.

Copyright © 2007-8 Tech Paul. All rights reserved. post to jaanix

Share this post :

Survey results

Folks–
My thanks to all who participated in my survey.

The results are in and they were lopsided– the new look stays.